Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix turnstile captcha invalid #5442

Merged
merged 1 commit into from
May 16, 2024
Merged

Fix turnstile captcha invalid #5442

merged 1 commit into from
May 16, 2024

Conversation

charlesBochet
Copy link
Member

@charlesBochet charlesBochet commented May 16, 2024

Signing in is a two steps process:

  • Checking if the user email is already used
  • Checking if the email + password is correct

Those two steps need a captchaToken to be valid. Unfortunately, from Cloudflare Turnstile doc:
A token can only be validated once and cannot be consumed twice. Once a token has been issued, it can be validated within the next 300 seconds. After 300 seconds, the token is no longer valid and another challenge needs to be solved

So we need to generate a new token at each step instead of re-using the same

@charlesBochet charlesBochet merged commit f31b2c2 into main May 16, 2024
12 checks passed
@charlesBochet charlesBochet deleted the fix-cloudflare-captcha branch May 16, 2024 14:30
arnavsaxena17 pushed a commit to arnavsaxena17/twenty that referenced this pull request Oct 6, 2024
Signing in is a two steps process:
- Checking if the user email is already used
- Checking if the email + password is correct

Those two steps need a captchaToken to be valid. Unfortunately, from
Cloudflare Turnstile doc:
`A token can only be validated once and cannot be consumed twice. Once a
token has been issued, it can be validated within the next 300 seconds.
After 300 seconds, the token is no longer valid and another challenge
needs to be solved`

So we need to generate a new token at each step instead of re-using the
same
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants